$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/4bfa7a9f-28d3-45b0-a839-a57519ecaeae/2/627B387604DE44D6006F0E7567E2D07EE82CF6BD.mft File: 627B387604DE44D6006F0E7567E2D07EE82CF6BD.mft (raw, json) Hash identifier: IB0pdqBoKCj2Toc2cmCc8fjCwVDUUPI8bgwrd3A6WdE= Subject key identifier: 61:C5:06:C8:75:10:CF:88:87:8F:B2:77:12:62:DA:98:3C:80:F3:F8 Authority key identifier: 62:7B:38:76:04:DE:44:D6:00:6F:0E:75:67:E2:D0:7E:E8:2C:F6:BD Certificate issuer: /CN=627B387604DE44D6006F0E7567E2D07EE82CF6BD Certificate serial: 68AD71EEB858E9589C4FC870BE4B1EBE0277DD5A Authority info access: rsync://krill.47272.net/repo/HYEHOST/5/627B387604DE44D6006F0E7567E2D07EE82CF6BD.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/4bfa7a9f-28d3-45b0-a839-a57519ecaeae/2/627B387604DE44D6006F0E7567E2D07EE82CF6BD.mft Manifest number: 8A Signing time: Sun 24 May 2026 21:05:27 +0000 Manifest this update: Sun 24 May 2026 21:00:27 +0000 Manifest next update: Mon 25 May 2026 23:33:27 +0000 Files and hashes: 1: 627B387604DE44D6006F0E7567E2D07EE82CF6BD.crl (hash: lUJPOn6cqksSoKyh9sMgoUG2ceJ76tkE0ntfNMxVHhk=) 2: 326130613a363034343a376432323a3a2f34382d3438203d3e20323134353130.roa (hash: 2VvQmqh0rgVlWv8W6Pzf59GFxuPhxLO/UhXjGSwmG7I=) 3: 326130613a363034343a376436303a3a2f34342d3434203d3e20323134353130.roa (hash: y/xuVv7X6zYCJrPA+bDxsoe/LQIZz7CWdfVo8c7UFKw=) 4: 326130613a363034343a376430303a3a2f34342d3434203d3e20323134353130.roa (hash: ae529QqeuntcTFvv9T15+WP4/UdZC9RUyhsU7rktznM=) 5: 326130613a363034343a376432303a3a2f34382d3438203d3e20323134353130.roa (hash: c4XzPukkzKV+FHVuebz0bc6eIqhJ7TnmT9Q2167h39Y=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/4bfa7a9f-28d3-45b0-a839-a57519ecaeae/2/627B387604DE44D6006F0E7567E2D07EE82CF6BD.crl rsync://rsync.paas.rpki.ripe.net/repository/4bfa7a9f-28d3-45b0-a839-a57519ecaeae/2/627B387604DE44D6006F0E7567E2D07EE82CF6BD.mft rsync://krill.47272.net/repo/HYEHOST/5/627B387604DE44D6006F0E7567E2D07EE82CF6BD.cer rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 25 May 2026 23:33:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:ad:71:ee:b8:58:e9:58:9c:4f:c8:70:be:4b:1e:be:02:77:dd:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=627B387604DE44D6006F0E7567E2D07EE82CF6BD Validity Not Before: May 24 21:00:27 2026 GMT Not After : May 25 23:33:27 2026 GMT Subject: CN=61C506C87510CF88878FB2771262DA983C80F3F8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:4f:31:4b:c6:3a:e7:d9:74:78:cd:eb:d4:82: 61:eb:7a:bf:82:f4:be:e9:b7:d8:80:46:ed:2c:de: 7d:9b:a6:c9:ea:f9:80:51:76:92:dc:47:74:e7:f1: ec:cb:8b:7f:12:e9:a4:58:5e:36:66:dd:1e:56:cb: c7:2d:fd:ca:e5:0a:a8:4f:4f:29:13:94:c2:57:16: 0f:2d:42:74:5c:46:db:ef:31:fa:b3:28:57:9e:4a: 92:87:d9:47:bd:e1:68:c5:33:7f:70:0f:0c:67:6e: bb:76:7d:58:d7:cf:c2:31:a2:33:f1:89:da:c9:60: a8:36:8c:e4:5f:34:97:fb:6a:e3:8a:81:21:37:ff: 4a:a6:9c:a2:d5:ee:87:42:3d:20:f5:57:77:0b:f3: 66:ec:9b:4f:95:b5:d0:5c:e7:0c:94:ca:3a:ea:71: 6b:79:db:c7:64:f5:85:28:4b:21:6a:01:ba:b1:0a: 01:48:3b:ad:e1:c0:a7:b9:3e:27:e6:4b:1b:fb:8b: f9:e4:8e:24:cd:3a:df:f2:e9:ab:2c:e1:d4:54:2f: 88:f0:11:6b:81:d0:64:d0:e1:b8:c5:b7:f4:e1:f8: 56:f9:0b:cc:ab:9f:2c:78:51:e0:64:62:b6:85:29: 8e:b5:05:b6:5f:03:57:8d:06:47:20:13:23:e1:12: a9:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:C5:06:C8:75:10:CF:88:87:8F:B2:77:12:62:DA:98:3C:80:F3:F8 X509v3 Authority Key Identifier: keyid:62:7B:38:76:04:DE:44:D6:00:6F:0E:75:67:E2:D0:7E:E8:2C:F6:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/4bfa7a9f-28d3-45b0-a839-a57519ecaeae/2/627B387604DE44D6006F0E7567E2D07EE82CF6BD.crl Authority Information Access: CA Issuers - URI:rsync://krill.47272.net/repo/HYEHOST/5/627B387604DE44D6006F0E7567E2D07EE82CF6BD.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/4bfa7a9f-28d3-45b0-a839-a57519ecaeae/2/627B387604DE44D6006F0E7567E2D07EE82CF6BD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 81:3d:fb:15:75:67:79:1c:70:12:e3:e1:4a:9a:70:a2:ec:14: 23:d3:15:d8:1c:a2:ac:5e:5c:3a:57:66:49:09:bd:f5:a1:e3: 03:a1:7e:54:ec:40:21:c6:a7:2c:ea:88:37:02:56:10:43:2d: 1d:9f:07:8d:60:c5:3e:59:b0:95:52:81:77:73:f6:cd:10:96: 75:34:e5:2e:d4:2a:9f:30:26:6d:05:a4:d1:27:41:3c:46:ea: fb:75:4a:fc:bf:e4:58:6f:94:ba:5a:bb:56:8f:6d:1f:8d:f4: af:0e:8b:01:df:e9:ee:79:2c:2b:39:ab:32:e3:1b:6a:29:c0: b1:cc:28:8e:ae:de:1c:e1:26:f8:53:fc:4b:7f:da:0c:ac:c2: c2:db:82:aa:d7:c8:b7:c4:bc:a6:d5:6a:d2:43:7f:10:aa:9c: 6e:da:6f:be:06:2c:b5:83:28:9b:5d:02:75:9f:8b:e9:86:ae: 3c:af:67:2c:f8:fd:f3:1a:77:ad:39:cc:cf:8a:0a:5c:a2:81: 14:e8:31:57:c4:92:92:48:ae:fa:e0:d7:b4:3a:15:df:29:b9: 77:f3:f1:8d:1e:52:e8:a5:0c:0c:2e:f9:3c:d6:39:be:10:3f: b0:4d:d0:16:68:66:ec:b5:77:de:d4:b5:9a:6b:e6:f4:b4:8c: 6a:3b:0a:f7 -----BEGIN CERTIFICATE----- MIIFSDCCBDCgAwIBAgIUaK1x7rhY6VicT8hwvksevgJ33VowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjI3QjM4NzYwNERFNDRENjAwNkYwRTc1NjdFMkQwN0VF ODJDRjZCRDAeFw0yNjA1MjQyMTAwMjdaFw0yNjA1MjUyMzMzMjdaMDMxMTAvBgNV BAMTKDYxQzUwNkM4NzUxMENGODg4NzhGQjI3NzEyNjJEQTk4M0M4MEYzRjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUTzFLxjrn2XR4zevUgmHrer+C 9L7pt9iARu0s3n2bpsnq+YBRdpLcR3Tn8ezLi38S6aRYXjZm3R5Wy8ct/crlCqhP TykTlMJXFg8tQnRcRtvvMfqzKFeeSpKH2Ue94WjFM39wDwxnbrt2fVjXz8IxojPx idrJYKg2jORfNJf7auOKgSE3/0qmnKLV7odCPSD1V3cL82bsm0+VtdBc5wyUyjrq cWt528dk9YUoSyFqAbqxCgFIO63hwKe5PifmSxv7i/nkjiTNOt/y6ass4dRUL4jw EWuB0GTQ4bjFt/Th+Fb5C8yrnyx4UeBkYraFKY61BbZfA1eNBkcgEyPhEqmVAgMB AAGjggJSMIICTjAdBgNVHQ4EFgQUYcUGyHUQz4iHj7J3EmLamDyA8/gwHwYDVR0j BBgwFoAUYns4dgTeRNYAbw51Z+LQfugs9r0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNGJmYTdhOWYtMjhkMy00NWIwLWE4MzktYTU3NTE5ZWNh ZWFlLzIvNjI3QjM4NzYwNERFNDRENjAwNkYwRTc1NjdFMkQwN0VFODJDRjZCRC5j cmwwbwYIKwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL2tyaWxsLjQ3 MjcyLm5ldC9yZXBvL0hZRUhPU1QvNS82MjdCMzg3NjA0REU0NEQ2MDA2RjBFNzU2 N0UyRDA3RUU4MkNGNkJELmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzRiZmE3YTlmLTI4ZDMtNDViMC1hODM5LWE1NzUxOWVjYWVhZS8yLzYyN0IzODc2 MDRERTQ0RDYwMDZGMEU3NTY3RTJEMDdFRTgyQ0Y2QkQubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCBPfsV dWd5HHAS4+FKmnCi7BQj0xXYHKKsXlw6V2ZJCb31oeMDoX5U7EAhxqcs6og3AlYQ Qy0dnweNYMU+WbCVUoF3c/bNEJZ1NOUu1CqfMCZtBaTRJ0E8Rur7dUr8v+RYb5S6 WrtWj20fjfSvDosB3+nueSwrOasy4xtqKcCxzCiOrt4c4Sb4U/xLf9oMrMLC24Kq 18i3xLym1WrSQ38Qqpxu2m++Biy1gyibXQJ1n4vphq48r2cs+P3zGnetOczPigpc ooEU6DFXxJKSSK764Ne0OhXfKbl38/GNHlLopQwMLvk81jm+ED+wTdAWaGbstXfe 1LWaa+b0tIxqOwr3 -----END CERTIFICATE-----Generated at Mon May 25 15:46:27 2026 by rpki-client